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DETAILED ACTION 

1. This action is responsive to the amendment filed on October 9, 2007. Claim 1 is 
amended. Claims 1-14 are pending. Claims 1-14 represent secure management 
protocol. 



2. Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the 
subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made to a 
person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 



3. Claims 1-14 are rejected under 35 U.S.C. 103(a) as being unpatentable over Win 
et al. U.S. 6,182,142 in view of Bennett U.S. 6,633,587. 
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Win teaches the invention substantially as claimed including distributed access 
management of information resources (see abstract). 

As to claim 1 , Win teaches a system comprising: 

A workstation communicatively coupled to a network (figure 1, item 100)); and 
A managed appliance communicatively coupled to the network (figure 1 , item 

106); 

Wherein the workstation operatively initiates a management session with the 
managed appliance by establishing a secure sockets layer connection with the 
managed appliance and then issuing a login request to the managed appliance (column 
6, lines 48-61; column 22, line 66 to column 23, line 5; figure 5B). ■ 

Win fails to teach explicitly a predefined Transmission Control Protocol (TCP) 
port number. 

However, Bennett teaches system and method for delivering reliable datagram 
service through connection-oriented sen/ice. Bennett teaches a predefined 
Transmission Control Protocol (TCP) port number (column 4, line 30). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine Win in view of Bennett to provide establishing a secure 
sockets layer connection on a predefined Transmission Control Protocol (TCP) port 
number. One would be motivated to so to allow any client on any host may connect to 
the process via LAN/WAN communications (column 4, lines 30-31). 
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Win fails to teach explicitly a transmission of Simple Network Management 
Protocol (SNMP) commands. 

However, Bennett teaches a transmission of Simple Network Management 
Protocol (SNMP) commands (column 4, line 7; column 1, lines 55-61). 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combine Win in view of Bennett to provide a transmission of 
Simple Network Management Protocol (SNMP) commands occurs over the secure 
sockets layer connection by using a secure sockets layer communication method. One 
would be motivated to do so to allow monitoring and controlling the network. 

As to claim 2, Win teaches the method of claim 1 , wherein the change is adding 
a node to the plurality of nodes (column 6, lines 64-67, Wieland discloses adding a 
device to a list). 

As to claim 3, Win teaches the system of claim 1 , wherein the managed 
appliance responds to the login request by transmitting a login reply across the network 
(column 1 1 , lines 22-28). 

As to claim 4, Win teaches the system of claim 3, wherein the login reply is a 
message that includes status data reflecting the status of the login request (column 1 1 , 
line 66 to column 12, line 3). 
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As to claims 5, 6 and 7, Win teaches the system of claims 1 , 5 and 1 , 
respectively, wherein, during the management session, the workstation request 
objects identifier data from the managed appliance, the managed appliance transmits 
object identifier data to the workstation and during the management session, the 
workstation set the value of an object identifier in the managed appliance (column 1 1 , 
line 55 to column 12, line 10). 

As to claims 8, 9 and 10, Win teaches the system of claims 1 , 8 and 9, 
respectively, wherein, during the management session, the workstation writes a file to 
the managed appliance, transmits a request message to the managed appliance 
containing a name of the file and a size of the file, and the managed appliance 
transmits a reply message to the workstation in response to the request message 
(figure 5B). 

As to claims 11,12 and 1 3, Win teaches the system of claims 1,11 and 1 2, 
respectively, wherein, during the management session, the workstation reads a file 
from the managed appliance, wherein the workstation transmits to the managed 
appliance an identification of a name of he file to be read, and wherein the managed 
appliance transmits blocks of data comprising the file to the workstation, said blocks of 
data being transmitted one at a time (column 9, lines 53-62). 
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As to claim 14, Win teaches the system of claim 1 , wherein the workstation 
transmits a broadcast message to the managed appliance (figure 5A). 

4. Response to Arguments 

Applicant's arguments filed 10/09/07 have been fully considered but they are not 
persuasive. 

As to claims 1 1 , 12, 13, Applicant argue that the office action makes an incorrect 
assertion about the Win disclosure at column 9, lines 53-62 and figure 5B. The office 
action indicates that that Cited portion teaches "managed appliance transmits blocks of 
data comprising the file to the workstation, said blocks of data being transmitted one at 
a time." (Office Action 04/09/2007, page 6). The applicant respectfully disagrees. First, 
column 9, lines 53-62, describes figure 5A, not figure 5B. It is not clear if this is just a 
typographical error in the office action. Secondly, the cited portion addresses a state 
diagram of the steps carried out by the Access Server, and does not expressly or 
impliedly suggest a managed appliance transmitting blocks of data, or that the blocks of 
data are being transmitted one at a time... Applicant requests reconsideration of claims 
11-13 and/or clarification of the rejection. 

In regards to above point, Examiner respectfully disagrees. 
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In column 9, lines 53-62, Win discloses a state diagram of steps carried out by 
Access Server 106 (i.e. "managed appliance") in a preferred embodiment. As shown 
by state 502, browser 100 opens the URL of a login page. The login page prompts the 
user for a name and password, as shown in state 504 (i.e. "the workstation reads a file 
from the managed appliance"). Preferably, a single login page is provided, regardless 
of the number of Web applications to which the user has access. Thus, the system 2 
provides single secure log-in to Intranet or Extranet Web applications. The login page 
provides a single universal point of access to authorized applications and content (i.e. 
"the workstation (i.e. browser) transmits to the managed appliance an identification of a 
name of the file to be read (i.e. login page allowing the user to login, therefore 
transmitting identification of a name of the file to be read), and the managed appliance 
transmitting blocks of data comprising the file to the workstation, and said blocks of 
data being transmitted one at a time"). 

5. Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

Examiner has cited particular columns and line numbers in the references 
applied to the claims above for the convenience of the applicant. Although the specified 
citations are representative of the teachings of the art and are applied to specific 
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limitations within the individual claim, other passages and figures may apply as well. It 
is respectfully requested from the applicant in preparing responses, to fully consider the 
references in entirety as potentially teaching all or part of the claimed invention, as well 
as the context of the passage as taught by the prior art or disclosed by the Examiner. 
In the case of amending the claimed invention, Applicant is respectfully requested to 
indicate the portion(s) of the specification which dictate(s) the structure relied on for 
proper interpretation and also to verify and ascertain the metes and bounds of the 
claimed invention. 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to El Hadji M Sail whose telephone number is 571-272- 
4010. The examiner can normally be reached on 8:00-4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ario Etienne can be reached on 571-272-4001 . The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



El Hadji Sail 
Patent Examiner 
Art Unit: 2157 




